BruteConda

If this Helped you, Maybe You Can Help me By Sponsoring Me, which Will Help me Create Better "Open-source Tools" BruteConda A Directory Bruteforcing Tool That Makes Your Life Easier! Why Only BruteConda? Fast And Efficent Easy To Use User Friendly Requirements: Python3 Should Be Installed Followi...

uddup

UDdup - URLs Deduplication Tool The tool gets a list of URLs, and removes "duplicate" pages in the sense of URL patterns that are probably repetitive and points to the same web template. For example: root@kitploit: https://www.example.com/product/123 https://www.example.com/product/456...

uddup

UDdup - Herramienta de Deduplicación de URLs La herramienta obtiene una lista de URLs y elimina páginas "duplicadas" en el sentido de patrones de URL que probablemente sean repetitivos y apunten a la misma plantilla web. Por ejemplo: root@kitploit: https://www.example.com/product/123...

CVE-2024-27564

CVE-2024-27564 Descripción: Una vulnerabilidad en pictureproxy.php permite a atacantes remotos realizar peticiones arbitrarias inyectando URLs en el parámetro url. Esta vulnerabilidad SSRF puede ser explotada sin autenticación, lo que la hace particularmente peligrosa. El código vulnerable se...

CVE-2024-2997

Escáner CVE-2024-2997 Descripción general El Escáner CVE-2024-2997 es un escáner de vulnerabilidades avanzado diseñado para detectar la vulnerabilidad de inyección de comandos en aplicaciones web. Esta herramienta ayuda a los profesionales de seguridad a identificar riesgos de seguridad potencial...

CVE-2023-22432

CVE-2023-22432 Verificación del PoC de la vulnerabilidad de web2py CVE-2023-22432 Una vulnerabilidad CVE-2023-22432 en web2py fue divulgada el 31 de enero de 2023 hora de EE. UU.. Este artículo describe nuestra discusión sobre esta vulnerabilidad y los resultados de nuestra verificación. Resumen ...

fuzzuli

fuzzuli 动机 • 背景 • 安装 • 用法 • 运行 fuzzuli • 工具页面 fuzzuli 是一个 URL 模糊测试工具，旨在通过基于域名创建动态字典来发现关键备份文件。 动机 在我多年来进行应用安全测试的过程中，我发现大量关键备份文件被保存在外部可访问的目录中。在命名这些文件时，通常使用了一些常见词汇（如 backup.zip、db.rar、conf.tar.gz 等）。然而，大多数文件是根据应用程序所在的域名来命名的。假设我们有一个域名地址 fuzzuli.musana.net，如果开发者将关键备份文件保存在可访问目录中，可能的文件名会是这样。raw...

PoC-CVE-2021-41773

CVE-2021-41773 Apache HTTP Server Path Traversal Exploit A Python exploit for CVE-2021-41773, a path traversal vulnerability in Apache HTTP Server 2.4.49 that allows reading arbitrary files from the server. Vulnerability Details CVE-2021-41773 is a path traversal vulnerability in Apache HTTP Serv...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

CVE-2024-22243

CVE-2024-22243 Autor: Sean Pesce Este proyecto contiene una aplicación web de ejemplo que demuestra escenarios explotables para CVE-2024-22243, una vulnerabilidad de análisis de URL en el Spring Framework de Java divulgación oficial aquí. Vulnerabilidad Las versiones afectadas de Spring analizan ...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use...

xsssniper

XSSSNIPER xsssniper 是一个方便的 XSS 发现工具，具有批量扫描功能。 使用方法： root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use --threads=THREADS number of threads...

idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

CVE-2025-30208-Series

CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Resumen de vulnerabilidades CVE-2025-30208, CVE-2025-31125 y CVE-2025-31486 son vulnerabilidades de lectura arbitraria de archivos en el servidor de desarrollo de Vite. Estas vulnerabilidades permiten a un atacante eludir los controles de acceso...

ProxyShell

ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. This faulty URL normalization lets us access an arbitrary backend URL while running as the Exchange Server machine account. Although this bug is not as powerful as the SSRF in ProxyLogon, and w...

SCANNER-INURLBR

新仓库 在搜索引擎中进行高级搜索，提供分析以利用 GET/POST 捕获电子邮件和 URL，并为每个找到的目标/URL 提供内部自定义验证结合点。 https://github.com/MrCl0wnLab/SCANNER-INURLBR...

CVE-2026-88852 Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla < 7.0.0, Snippets Pro extension for Joomla < 11.0.0

Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla 7.0.0, Snippets Pro extension for Joomla 11.0.0 - Snippets substitutes variable values supplied by an article tag into saved Snippet content. The affected versions do not consider the...

CVE-2026-88852

CVE-2026-88852 is a privileged stored XSS in the Snippets Free (Joomla &lt; 7.0.0) and Snippets Pro (Joomla

CVE-2026-85189 Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0

Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla 17.0.0 - Modals treats a destination using an executable browser URL scheme as an ordinary modal URL. The value can reach both the generated link and the iframe-loading path...